SonicWall NSa 3800 03-SSC-5827 1U Rackmount Firewall, Secure Upgrade Appliance Only
Overview
The SonicWall Gen 8 NSa Series is a 1U rack-mountable next-generation firewall line with simplified licensing across Hardware Only, Advanced and Managed Protection options. The 03-SSC-5827 is the NSa 3800 Secure Upgrade appliance. It carries no attached subscription and is offered only to SonicProtect customers upgrading their hardware. Support and optional security subscriptions are otherwise sold separately.
Technical Details
The SonicWall NSa 3800 03-SSC-5827 is a 1U rackmount next-generation firewall running SonicOS 8, with 24×1GbE RJ45, 6×10/5/2.5/1GbE SFP/SFP+, 4×5/2.5/1GbE SFP/SFP+. Threat Prevention throughput is 8 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled (12 Gbps firewall inspection), and it holds up to 3,000,000 concurrent SPI connections. This part number is Appliance Only: SonicWall support and optional security subscriptions are sold separately. It is used at a campus or main-office internet edge, in the DMZ and between user and server segments.
Best For
The NSa 3800 suits a campus or main-office internet edge that needs 8 Gbps of Threat Prevention throughput and up to 3,000,000 concurrent SPI connections. It suits existing SonicProtect subscribers upgrading their hardware. Size against the Threat Prevention figure, not the firewall inspection throughput.
Not suitable if:
- your inspected traffic exceeds 8 Gbps, the published Threat Prevention throughput
- you need security services included in the part number, since this one is Appliance Only
- you do not hold an active SonicProtect subscription, since this upgrade appliance is restricted to SonicProtect customers
03-SSC-5827 Specifications
| Ports & Uplinks | |
|---|---|
| Fixed Interfaces | 24×1GbE RJ45, 6×10/5/2.5/1GbE SFP/SFP+, 4×5/2.5/1GbE SFP/SFP+ |
| Max Port Speed | 10 GbE |
| Management & Console Ports | 1×1GbE RJ45 out-of-band management, 1×Console, 2×USB (type-A) |
| Performance & Scale | |
| Firewall Throughput | 12 Gbps (RFC 2544) |
| Threat Prevention Throughput | 8 Gbps (Gateway AV, Anti-Spyware, IPS and Application Control enabled) |
| TLS/SSL Inspection Throughput | 3 Gbps (DPI SSL) |
| IPsec VPN Throughput | 8 Gbps (1418-byte UDP, AESGMAC16-256) |
| Maximum Concurrent Sessions | 3,000,000 (SPI) |
| New Sessions per Second | 90,000 |
| Maximum DPI Connections | 1,200,000 (DPI) |
| Maximum IPsec VPN Tunnels | 3,000 (site-to-site) |
| Hardware & Memory | |
| Onboard Storage | 256 GB (expandable up to 512 GB) |
| Power & Thermal | |
| Power Supply | 150 W; 100-240 VAC input (50-60 Hz) |
| Redundant Power Supply | Optional |
| Maximum Power Consumption | 102.3 W |
| Physical & Environmental | |
| Form Factor | 1U Rackmount |
| Dimensions (H x W x D) | 1.73 × 17.01 × 12.83 in (4.4 × 43.2 × 32.6 cm) |
| Weight | 10.1 lb (4.6 kg) |
| Operating Temperature | 32 to 104 °F (0 to 40 °C) |
| Software | |
| Operating System | SonicOS 8 |
| High Availability | Active/Passive with stateful synchronization |
| Central Management Platform | Network Security Manager (NSM) 3.0 and above |
| Routing Protocols & IPv6 | BGP, OSPF, RIPv1/v2, static routes, policy-based routing; IPv6 certified |
FAQ
Does the SonicWall NSa 3800 03-SSC-5827 include a security subscription?
No. The 03-SSC-5827 is Appliance Only: firewall, VPN and routing run on SonicOS 8, while SonicWall support and security subscriptions such as the Advanced Protection Security Suite are sold separately. SonicWall's Gen 8 Architecture and Services datasheet notes that firewall management is included with Gen 8 firewalls that have support or an active security bundle.
How much traffic can the SonicWall NSa 3800 03-SSC-5827 handle?
SonicWall publishes no user count, so size the NSa 3800 on its figures. Firewall inspection throughput is 12 Gbps, but Threat Prevention throughput is 8 Gbps with Gateway AV, Anti-Spyware, IPS and Application Control enabled; size against that. It holds 3,000,000 concurrent SPI connections and 1,200,000 DPI connections, and opens 90,000 new connections per second.
What interfaces does the SonicWall NSa 3800 03-SSC-5827 have?
The NSa 3800 provides 24×1GbE RJ45, 6×10/5/2.5/1GbE SFP/SFP+, 4×5/2.5/1GbE SFP/SFP+. Management and console connectivity is 1×1GbE RJ45 out-of-band management, 1×Console, 2×USB (type-A). Transceivers for any SFP-type ports are sold separately.
Does the SonicWall NSa 3800 03-SSC-5827 support high availability?
The NSa 3800 supports Active/Passive high availability with stateful synchronization.
What is the difference between the NSa 3800 and the NSa 4800?
Both run the same SonicOS 8. The NSa 3800 is rated at 12 Gbps firewall inspection throughput, 8 Gbps Threat Prevention throughput and 3,000,000 concurrent SPI connections; the NSa 4800 is rated at 20 Gbps, 13 Gbps and 6,000,000. Check both interface sets in the specification tables.
Who can buy the 03-SSC-5827?
Only SonicProtect customers. The 03-SSC-5827 is upgrade hardware with no attached subscription, offered to existing SonicProtect subscribers only. Network Devices Inc. confirms eligibility before ordering.
Does the 03-SSC-5827 include SonicWall support?
Support is not included with an Appliance Only part number. SonicWall support and optional security subscriptions are sold separately, and Network Devices Inc. confirms the correct support option before the order is placed.
How is the SonicWall NSa 3800 03-SSC-5827 managed?
The NSa 3800 is managed through Network Security Manager (NSM) 3.0 and above, and locally through the SonicOS web interface and CLI. Firewall policy, SD-WAN, VPN and high availability are configured on the appliance; the security services on it are licensed separately unless this part number bundles them. SonicWall includes centralized management and alerting as part of support, so NSM management needs an active support contract or security bundle.
What condition is the 03-SSC-5827 sold in, and what warranty applies?
Network Devices Inc. supplies the 03-SSC-5827 new and factory sealed. It is covered by a one-year Network Devices Inc. warranty and a 30-day return window. Orders ship from our New Jersey and Texas warehouses.
